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COUNTING POLYNOMIAL SUBSET SUMS 


JIYOU LI AND DAQING WAN 


Abstract. Let D be a subset of a finite commutative ring R with identity. 
Let f(x) E R[x] be a polynomial of positive degree d. For integer 0 < k < \D\, 
we study the number Nf(D, k , b) of /c-subsets S C D such that 


f( x ) = b ■ 

x£S 

In this paper, we establish several asymptotic formulas for Nf(D,k,b), de¬ 
pending on the nature of the ring R and /. 

For R = Z n , let p = p(n) be the smallest prime divisor of n, \D\ = n — c > 
Cd'np~d + c and f(x) = adX d -\— • + ao E Z[ic] with (ad, ..., ai, n) = 1. Then 




(S(n)(n — c) + (1 — <5(n))(Crfnp 3 + c) + k — 1 
k 


partially answering an open question raised by Stanley ED, where S(n) = 
TLjrc j and Cd = e 1,85d . Furthermore, if n is a prime power, then 

S(n) = 1/p and one can take Cd = 4.41. 

For R = F q of characteristic p, let f(x) E F 9 [a;] be a polynomial of degree 
d not divisible by p and D C¥ q with \D\ = q — c > (d — 1 )y/q + c. Then 


<( 


rV + ^-^+cj + fc - 1 


If f(x) = ax + b, then this problem is precisely the well-known subset sum 
problem over a finite abelian group. Let G be a finite abelian group and let 
D C G with \D\ = \G\-c>c. Then 

(c+(\G\ -2c)S(e(G)) + k - 1^ 
k 




where e(G) is the exponent of G and 6(n) = i. In particular, we 

give a new short proof for the explicit counting formula for the case D = G. 


1. Introduction 

Let D be a subset of a finite commutative ring R with identity. Let f(x) € R[x] 
be a polynomial of degree d. Many problems from combinatorics and number theory 
are reduced to computing the number Nf(D , k, b), which is defined as the number 
of /c-subsets S C D such that 

X f( x ) = b - 

x£S 

For example, when R equals Z„, this problem was raised by Stanley [25| (Page 
136). 

When /( x) is linear, we may just take f(x) = x. The definition of N(D, k, b) := 
N x (D,k,b) is then defined for R = G to be any finite abelian group (no ring 
structure is used). The problem of computing N(D,k,b) is then reduced to the 
counting version of the /c-subset sum problem over G. 


l 
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For G = Z„, this problem is a well known NP-hard problem in theoretical 
computer science. For a general finite abelian group G , and an arbitrary D C G, 
determining if N(D,k,b) > 0 is an important difficult problem in algorithms and 
complexity. This has been studied extensively in recent years, especially over finite 
fields and over the group of rational points on an elliptic curve over a finite field, 
because of their important applications in coding theory and cryptography, see [4j , 
[29] . [31] and the references there. One expects that the problem is easier if |Z1| is 
large compared to |G| or D has some algebraic structure. For example, the dynamic 
programming algorithm gives a polynomial time algorithm to compute N(D,k,b) 
if \D\ > |G| e for some positive constant e > 0. In the extreme case that D = G, an 
explicit formula for N(D 1 k,b) was obtained in Li and Wan [21], see also Kosters 
[16] for a new proof and an improvement. The sieving argument in [21] has been 
used to obtain a good asymptotic formula for N(D,k,b) in the more general case 
that D is close to G, for instance, when \D\ > ||G|. In the case that G is the group 
of rational points on an elliptical curve over a finite field, please refer to [22] for a 
concrete example. 

For G = Z„, the finite cyclic group of n elements and D = G = Z„, an old 
result of Ramanathan (1945) gives an explicit formula for N(7j ni k,b) by using 
equalities involving Ramanujan’s trigonometric sums. A formula for N(D , fc, b ) 
and several generalizations were given by Stanley and Yoder [2B], Kitchloo and 
Patcher [17]. 

When G = is the finite cyclic group of prime order p and |Z)| p 2 / 3 is arbi¬ 
trary, Erdos and Heilbronn proved in their famous paper [BJ that 1V(.D, k , b) = 

^-(l + o(l)) when p tends to infinity. 

When G is the additive group of a finite field F g and |G| — \D\ is bounded by 
a constant, an explicit formula for N(D,k,b) was given in [19]. When G is an 
arbitrary finite abelian group, and D = G or D = G*, an explicit and efficiently 
computable formula for N(D,k,b) was given in i2T|. Kosters P3j gave a different 
and shorter proof by using methods of group rings. In this paper, we will give a 
third short proof. 

We also obtain a general bound for the £;-subset sum problem over G, which 
significantly generalizes previous results which assumed D to be very close to G. 
This will be explained shortly later for the case |G| = p. 

Theorem 1.1. Let G be a finite abelian group of order |G|. Let D C G with 
\D\ = |G| — c > c. Let N(D, k , b ) be the number of k-subsets in D which sums to b. 
Then 


N(D,k,b) 


1 f\ G \ ~ C \ < ( C + (l G l - 2 c )(Si|e(G),M(i)=-l 7) + k - 1 

|G| V k J k 


where e(G) is the exponent of G, which is defined as the maximal order of a nonzero 
element in G. 


In order for this bound to be non-trivial, at least k and c need to satisfy 
|G|-c>(|G|-2c)( £ \) + k + c. 

i|e(G),/j(i)=-l 
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Corollary 1.2. Let G be a finite elementary abelian p-group (thus e(G ) 
Then, 


N(D, k, b ) 


±(\G\-c\ /MhM + c + fc _r 

\G\ V k ) ~ V k 


p)- 


In the case |G| = p, to obtain a non-trivial estimate, one needs to solve 


p — c> 


(P ~ 2c) 
P 


+ k + c. 


Asymptotically, for smaller k, we could take c as large as p/2. 

Let us turn to the cases for general f(x). Few results are known for the number 
Nf(D,k,b) when f(x) is a polynomial of higher degree. In the case that /( x) is 
the simplest monomial x d , R is the prime field F p and D = ¥*, it was first proved 
by Odlyzko-Stanley (23] that 




2 p- 1 

P 


< e O(d^plogp) 


where N x d{¥* p ,b) = ELo N x d ( F p> b ). 

For a general finite field R = F ? , the finite field of q = p* elements, Zhu and Wan 
m proved the following more precise result: 


N x d(¥*k, b) — 


1^-1 


< 2g 


-i/2 ^dy/q + q/p+k 


Since N x d(¥*,b) 
bound 


one can deduce the following explicit 


N x d(¥*b)~ 


2 1- 


< 


4 p 

\[2ixq 


,(d^q+q/p) log? 


which extends the Odlyzko-Stanley bound from a prime finite field to a general 
finite field. Note that simply replacing p with q in the Odlyzko-Stanley bound is 
not known to be true and is probably not true if q is a high power of p. It is true 
if q = p 2 . 

These bounds are nontrivial only for d < y/q. When q = p is prime, a series 
of subsequent work had been made by Garcia-Voloch, Shparlinski, Heath-Brown, 
Heath-Brown- Konyagin and Konyagin. They used variations of Stepanovs method 
and released the limit on the degree to d < p 3 / 4_e . For more details, please refer to 
PQ. Using their remarkable Gauss sum bound proved by using additive combina¬ 
torics and harmonic analysis, Bourgain, Glibichuk and Konyagin Ell proved that 
if d < p 1 ^ 6 for some constant S > 0, then there is a constant 0 < e = e(S) < S such 
that 


N xd (¥*b)~ 


2 P ~ 




By combining Bourgain’s bound and Li and Wan’s sieving technique [5D], Li [15] 
proved a refined result that if d < p 1-5 , then there is a constant 0 < e = e(<5) < 6 
such that 


N x d(¥*,k,b) 


1/p— 1\ /p 1 e + dk — d' 

p{ k ) ~{ k 


It would be interesting to extend this type of result to a general finite field of 
characteristic p. 
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In this paper, we obtain several asymptotic formulas for Nf(D,k,b) when f(x) 
is a general higher degree polynomial. In the case that R = Z n , the finite ring of 
n residues mod n, and / is a polynomial of degree d over the integers, we have the 
following bound, proved using Hua’s bound for exponential sums and our sieving 
technique. 

Theorem 1.3. Let R = Z n and p = p(n) be the smallest prime divisor of n. 
Assume \D\ = n — c > Cd,np~d + c and f(x) = ad,x d + • • • + ao £ Z[x] with 
(ad, ■ ■ ■, oi, n) = 1. Then we have 

N f (D k b) - - ^ ~ ^ - c ) + - 5(n))(C d np-v + c) + k - 1^ 

where S(n ) = M (i)=_i \ an d Cd = e 185d . Furthermore, if n is a prime power, 

then S(n ) = 1/p and the constant e 1S5d can be improved to the absolute constant 

4.41. 


Note that the above bound is pretty good for n with only large prime factors so 
that S(n) = Z!i|n,/i(i)=-i 1 is relatively small. 

When R = ¥ q and / is a polynomial of degree d over F g , we obtain a better 
bound thanks to the Weil bound. In this case, for simplicity, we suppose that 
f(x) € F g [x] is a polynomial of degree d, d is not divisible by p and d < q since 
x q = x for all x £W q . 


Theorem 1.4. Let f(x) € F g [a;] be a polynomial of degree d not divisible by p. For 
R = F q and \D\ = q — c> (d — 1 )y/q + c, we have 


Nf(D,k,b) 


lA?-c\ < (*? + *=H(d-l)qi+c) + k-l 
Q\ k J~\ k 


In particular, if q = p is a prime, then we have a nice “quadratic root” bound. 


Corollary 1.5. Let /( x) G F p [x] be a polynomial of degree 0 < d < p. For R = ¥ p 
and \D\ = p — c > (d — 1 ) v /p + c, we have 


N f (D,k,b) 


1 fp — c\ f(d — l)p 2 + c + k 

p{ k ) ~{ k 


The paper is organized as follows. In Section 2, we briefly review a distinct 
coordinate sieving formula. In Section 3, we establish a general formula for general 
ring R. In the remaining sections, several more explicit formula are derived. 

Notations. For i£l, let (x)o = 1 and (x)k = x(x — 1) • • • (x — k + 1) for k € 
Z + . For k G N, (■£) is the binomial coefficient defined by (^) = ^rr- For a power 
series f(x), [x k ]f(x) denotes the coefficient of x k in f(x). [a-’J always denotes the 
largest integer not greater than x. 


2. A DISTINCT COORDINATE SIEVING FORMULA 

For the purpose of our proof, we briefly introduce the sieving formula discovered 
by Li and Wan )20j . Roughly speaking, this formula significantly improves the 
classical inclusion-exclusion sieve for distinct coordinate counting problems. We 
cite it here without proof. The first proof of this formula was given in |2flj . For a 
different proof by the theory of partial order please refer to [2T| . 
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Let SI be a finite set, and let S l. k be the Cartesian product of k copies of S7. 
Let X be a subset of Q k . Define X = {{x\,x^, ■ ■ ■ ,Xk) G X | ^ Xj,Vi ^ j}. 

Denote Sk to be the symmetric group on n elements. For a permutation r in 
Sk, the sign of r is defined by sign(r) = (—where 1(t) is the number 
of cycles of r including the trivial ones. Suppose we have the factorization r = 
(* 1*2 • • • ■ • • ja 2 ) ’ • • (hh ■■■L a ) with 1 < a i; 1 < i < s, then define 

X-t = {(ad, ... ,Xk) G X,^ = • • • = a?i 01 , * ■ • ,x h = ■ ■ ■ = x ias } . (2.1) 

Now we will state our sieve formula. We notice that there are many other interesting 
corollaries of this formula mm- 

Theorem 2.1. Let f(xi,X 2 , ... ,Xk) be any complex valued function defined over 
X. Then 

^2 f(xi,x 2) ...,Xk) = ^ sign(r) ^ f( x i,x 2 , ■ ■ ■ ,x h ). 

x£X reSk xEX r 

Note that in many situations the sum f( x i, x 2 , ■ ■ ■, Xk) is much easier to 

compute compared to the left one. 

Sk acts on S2 fc naturally by permuting the coordinates. That is, for r G Sk and 
x = (xi,X 2 , ■ • •, Xk) G Ll k , t o x = (x T (i), x t ( 2 )i ■ ■ ■ i x T (k ))• A subset X in D fc is said 
to be symmetric if for any x G X and any t G Sk, t o x G X. For t G Sk, denote 
by r the conjugacy class represented by t and sometimes it is more convenient to 
view it as the set of permutations conjugate to r. Conversely, for a conjugacy class 
t G Ck, just let r denote a representative permutation in this class. 

In particular, since two permutations in Sk are conjugate if and only if they have 
the same type of cycle structure, if X is symmetric and / is a symmetric function 
under the action of Sk, then we have the following simpler formula. 

Corollary 2.2. Let Ck be the set of conjugacy classes of Sk- If X is symmetric 
and f is symmetric, then 

^2 f(xi, x 2 ,---,x k ) = *22 si S n ( r ) C '( T ) 22 / O^ii x 2 , • • ■, x k), (2.2) 

xEX rEC k xEX t 

where C(t) is the number of permutations conjugate to r. 

Lemma 2.3. We have the following inequality for the coefficients of rational func¬ 
tions. For positive integers m and n, 

^ \l-x m ) n ~ ^ ^ (1 - x) n ' 

Proof. Since 


we have 

b fci 1 < +n-l\ (k + n-l\ = k 1 

L ‘ J (1 - x m ) n ~ \ [k/m] J ~ V k J [ 1 (1 - a:)" ' 


(1 — x) r 


k—0 


k + n — 1 
k 


□ 
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Lemma 2.4. If for all integers k > 0, we have 

[x k ]fi{x) < [x k }gx{x ), [x k ]f 2 {x) < [x k ]g 2 {x), 
then for all integers k > 0, 

[x k ]fi{x)f 2 (x) < [x k ]g 1 (x)g 2 (x). 


Proof. 

k k 

[x k ]fi{x)f 2 (x) = Y^[x z ]fi{x)-[x k - l ]f 2 (x) < Y^[x l ]gi(x)[x k - l ]g 2 (x) = [x k ]gi{x)g 2 (x). 
2—0 2—0 

□ 


Lemma 2.5. If a, b are integers and 0 < b < a, then we have the inequality on the 
coefficients for rational functions. 

r fcl (1 - x^) b ^ . k . 1 
^ (1 - xP) a ~ ^ ^(1 - x p ) a ' 

Proof. Applying Lemma 12.31 and Lemma 12.41 we have 

1 


-x p i) b . k ..l- X P\ 

l*"|--= [x k }{~ -—) 


(1 - xP)° 


1-xP ' (1 - xP) 


i—b 


= [x k }(l + x p + ■ ■ ■ + x {q - 1 '>P) b ■ 


(1 - x p) a 


-b 


< [x k ]{l + x p + ---+x {q ~ 1)p + ---) b ■ 


(1 - xP) a ~ b 


(1 — x p ) a ' 


□ 


We now establish a combinatorial upper bound which is crucial for the proof of 
our main results. A permutation t £ Sk is said to be of type (ci, c 2 , • • • , Ck ) if r 
has exactly Cj cycles of length i. Note that £V =1 = Let N(c±, c 2 ,..., Ck) be 

the number of permutations in S k of type (ci, c 2 , ..., Ck)■ It is well known that 


N(ci, c 2) ... ,c fc ) 


k\ 

l Cl ci!2 C2 c 2 ! ■ • • k Ck c k \ ’ 


and we then define the generating function 


Ck(h,t 2 ,-■ ■ ,t. k ) = ^2 n ( c i,c 2 , ■ ■ ■ ■,c k )t c 1 1 1% ■ ■ -t c k k . 

ici=k 


Lemma 2.6. Let q > s be two positive 1 'eal numbers. If ti = q for (i,d) > 1 and 
ti = s for ( i,d ) = 1, then we have the bound 

( i,d)—l ( i,d)—l 

C k (s~^~s,q,s~^~s,q, •••) = ^ IV(ci, c 2 , • • • , c k )s Cl s° 2 ■ ■ ■ q Cd s Cd+1 ■ ■ ■ 

ici—k 

<{s + (q-s)( V -) + k- l) fc . 

i\d,fi(i)=—l 
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Proof. Suppose d has the prime factorization d = Pf ; _i p s I . By the definition of 
the exponential generating function, we have 

k>0 

By the conditions U = q for (i,d) > 1 and U = 5 for (z, d) = 1, we deduce 

(i,d) = l (i,d) = l 

Ck(s, ■ ■ ■ ,s,q,s, ••• ,s,q, •••) = 


fc! 

r M fci 

¥ 


ws+w - \-u‘ 


d ~ 1 -£i+ U d - ! b+ U d+1 -^T- 


o s T.i t-+(9-«) E 


U,d)> 1 ' 


Using the inclusion-exclusion, the above expression can be re-written as 


r u ki 

Id 

u k 

Id 


5 Ei T + (9-«)(E P1 |i T+E P2 |i t-H E P1P2 |i T 


e -slog(l-u)--^i log(l-u P1 )-Li log(l-u P2 )-log(l-u P1P2 ) + - 


< 


< 


u 

Id 

r u k 

Id 

„,fc 


(1 — u PlP2 ) p i p 2 • ' 


- (1 — 1t) s (l — U Pl ) p l (1 — U P2 ) p 2 

1 


- (1 — w) s (l — U Pl ) p l (1 — U P2 ) P2 ■■■(! — U P 1P2P3)piP2P3 • • • 

1 


= /c! 


- (1 — it) s (l — u) P1 (1 — u) P2 ■ ■ ■ (1 — u)' 

s + {q- s){ Ei|d,^(i )=-1 t) + - 1N 
k 

U 

z' 


= (s + (q-s){ Y -) + k- l) fc . 

i\d,n(i)= — 1 

In the above inequality step, we used Lemma 12.51 and Lemma HU 


□ 


In the same spirit, a simpler special case is the following lemma and the proof 
is omitted. 

Lemma 2.7. Let q > s be two non negative real numbers. If L = q for d \ i and 
ti = s for d\i, then we have 
d\i d\i 

C k (sY~Ts,q,'sY~7s,q, ■■■) = Y N{ci,c 2 ,--- ,c k )s Cl s C2 ■■■q Cd s Cd+1 ■■■ 

Y, ici—k 


< 


U 

Id 

u k 

Id 


1 


. (1 - u) s (l - u d Y 

1 


■ J (l-u) s (l-u)^ 
= (s + (q- s)/d + k - l) fc . 
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3. General Case R 


Let if denote an additive character from G = (i?,+), the additive group of R , 
to the group of all nonzero complex numbers C*. Let ifo be the principal character 
sending each element in G to 1. Denote by G the group of additive characters of 
G, which is isomorphic to G. 


Lemma 3.1. Suppose that |i?| = q and D C R with \D\ = in. For a fixed poly¬ 
nomial f{x) £ R[x], let Nf(D,k,b) be the number of k-subsets S C D such that 

E x& s f ( x ) = b - Then 

k\Nf(D, k, b) = -(m)k + - V V sign( t)C(t)F t (V>), 

where Ck is the set of all conjugacy classes of Sk and C(r ) counts the number of 
permutations conjugate to r, and 

k 

F rW = II(E^(/(«))) C< - 

2=1 a£D 


Proof. Let X = D x D x ■ ■ ■ x D be the Cartesian product of k copies of D. 
Define X = {(x\,x 2 , ■ ■ ■ ,Xk) £ D k | Xi ^ Xj , V* ^ j}} to be the set of all distinct 
configurations in X. It is clear that |X| = m k and |X| = {m)k- Applying the 
orthogonal relations of the characters, one deduces that 

k\N f (D, k, b) = - Y 51!W( Xl ) + H - \-f(x k )-b) 

(x!,X2,...Xk)eX ipEG 

k 

H i=l 

For if ± tf 0 , let f^[x) = U(xi,x 2 , ■ ■ ■ ,Xk) = IlLi For T £ Sk, let 

k 

Fr{tf)= Y u( x )= 51 nwo*)). 

x£X r x£X t 2=1 

where X T is defined as in equation m ■ Obviously X is symmetric and fy(x±,x 2 ,..., Xk) 
is also symmetric on X. Applying equation (12.21) in Corollary 12.21 we have 

k\N f (D, k, b) = -(m) k + - V Y sig n ( T ) c ( T ) F rWi 

where C k is the set of all conjugacy classes of Sk and G(r) counts the number of 
permutations conjugate to r. For r £ Ck, assume r is of type (ci, c 2 , ■ ■ ., c k ), where 
Ci is the number of z-cycles in r for 1 < i < k. Note that 2_^ =1 ^ = Write 

T = (^l)(^2) ' * ' (^ci)(^ci+l^ci+2)(^ci+3^ci+4) ’ * * (^ci+2c2 — 1 ^ 1 + 202 ) • 

One checks that 


X r {( X \,..., x^) G D , Xi c ^+ 1 *^2 Cl +2 5 * * * 

Then we have 

k 

F r{jf) = Y nWN) 

xE.X t 2=1 


5 ^2 Cl +2c 2 -l 


= Xi 


c \ +2c 2 ’ 
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ci c 2 Ck 

= e n ^(/(*<)) (*«+»)) • • -n^ fc (/(* C1+C2H- \-ki )) 

X(=lX t 2—1 2=1 2=1 

k 

=n (E^(/(«))) c ‘- 

2=1 aG-D 

□ 

The above lemma reduces the study of the asymptotic formula for Nf(D, k, b) to 
the estimate of the partial character sum 'Yho.eD V’(/( a )) and another sum through 
%j). This is very difficult in general. However, if either D is large compared to 
R, or D and f{x) have some nice algebraic structures, one expects non-trivial 
estimates. One important example is the case that D = F* and f(x) = x d . As 
we have mentioned in the introduction section, a series of works by Garcia-Voloch, 
Heath Brown, Konyagin-Shparlinski, Konyagin using variants of Stepanovs method 
(d < p 3 / 4-e ), and by Bourgain and Konyagin using additive combinatorics and 
harmonic analysis (d < p 1-e )) shows that in this case D has a nice pseudo random 
property. 

We are now ready to use the above lemma to prove our main results by estimating 
various partial character sums and different summations in different cases. 

4. The Residue Ring Case R = Z n 

We first recall the following results on character sums over the residue class ring. 

Lemma 4.1 (Hua and Lu [111 123) 1. Suppose if is a primitive additive character of 
the group Z n . Let f(x) = JA=o a i xl G Z[x\ be a polynomial of positive degree d. If 
(ai, • • • , aa, n) = 1, then 

I E W(*))l < 

X^iLn 

Thus if D C Z n with \D\ = n — c, then 

\J2^f(x))\<e 1 - 85d n 1 - ji +c. (4.1) 

xSLD 

For d > 3, the bound (5.1) can be improved to 

| E W(*))l < 

by Ding and Qi [7]. See also Steckin m for an asymptotically better but not 
explicit bound for large d. 

When n is a prime power, Hua HDIHQ1 first obtained the bound 

I E ^ 

XGzLn 

and it was improved by many mathematicians including Chen, Chalk, Ding, Loh, 
Lu, Mit’kin, Necaev and Steckin [6j. The current best bound is proved by Cochrane 
and Zheng. 
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Lemma 4.2 (Cochrane and Zheng, [5]). Suppose ip is a primitive additive character 
of the group Z„. Let /( x) = Xa=o a i xl ^ be a polynomial of positive degree d. 
Assume n = p l and (ai, ■ • • , ad, p) = 1. Then 

I E W( x ))I ^ 4.41n 1- ^. 

:rGZ n 

Similarly, if D C Z„ with |D| = n — c, then 

| ^ ip(f(x)) | < 4.41n 1- ^ + c. 

x£D 

For readers interested in the exponential sums over Z„, we refer to a good survey 
by Cochrane and Zheng 

Proof of Theorem for R = Z„. Let ipo be the principal character sending 
each element in Z„ to 1. Also denote by Z„ the group of additive characters of Z n . 

Let Nf(D, k, b) be the number of fc-subsets S C D such that J2 x eS f( x ) = ^ Write 
\D\ = m. Applying Lemma ld.il we have 

k\N f (D,k,b ) = ~{m) k + - V ip~ l (b) V sign(T)C{T)F T (ip), 
n n z —^ 

where C k is the set of all conjugacy classes of S k and C(t) counts the number of 
permutations conjugate to r, and 

k 

^w = II(E^(/(«))) c ‘- 

2=1 a£D 

Let Cd = e 1S5d for general n and Cd = 4.41 for prime power n = p 4 . Applying 
equation 14. II in Lemma |5.11 if ip is primitive, then 

\F T {ip)\ < m^ k ^ Cim ^\C d n 1 -^ +c ) E -i Ci(1 - miW) , 

where uiifip) is defined as follows: m,i(ip) = 1 if ( i,n ) > 1 and mi{ip) = 0 if 
( i , n) = 1. Similarly, if order (ip) = h,h \n, then 

I E ^(/(£c))l = j^\ E I ^ C d nh~ 

a?(EZ n 

Thus 

|F t (V>)| < m^=i Cirai W(C' (i nr3 + 

where m.ipip) = 1 if (i, h) > 1 and mi(ip) = 0 if (i, /i) = 1. 

Let p = p(n) be the smallest prime divisor of n. Assume 

to > max \Cdnh~~ 3 + c} = C d np~ 3 + c. 

h\n,h^l 

Then we have 

k\N f (D,k,b) = ^(m) k + ^ E ^ _1 ( 6 ) E sig n (r)C'(r)F T (^) 

l^h\n 'ifj,order('tp)—h r^Ck 

> —(m)k — — V (j)(h ) V C(r)m^- 1 »( h ^) >1 Ci (CdTih~^ + c)^= 1 »( h *J>= 1 

n n ^ 

TGCfc 
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>-(m)k - - V' cp(t)(C d nh d- + c + (m-C d nh ^-c)( -) + fc-l) fe 

Tl Tl ^ J ^ J Z 

l^h\n i\h,fi(i)= — l 

Define 5(h) = Y^i\h i ?■ Obviously max{i5(/i), h \ n} = 5(n). Hence 

k\Nr(D, k, b) > —(m)k — (C d np~~ 3 + c + (m — C d np~~ 3 — c)5(n) + k — l)k 
n 

= —(m)k - ( 5(n)m + (1 - 5(n)(C d np~^ + c) + k - l) fc . 
n 

The second inequality follows from Lemma 12.61 

5. The Finite Field Case R = F g 

For our proof, we first recall Weil’s character sum estimate in the following form 

m- 

Lemma 5.1 (Weil). Suppose ip is a non-trivial additive character of the additive 
group F 9 . Let f(x) £ F q [x\ be a polynomial of degree d not divisible by p. Then, 

I WC 35 ))! ^ ( rf - l )Vd- 

xEFq 

Corollary 5.2. Suppose ip is a non-trivial additive character of the additive group 
F g . Let f(x) £ F 9 [x] be a polynomial of degree d not divisible by p. Suppose DCF, 
and |D| = q~ c. Then, 

\^2ip(f(x))\<(d-l)^/q + c. (5.1) 

x£D 

Proof of Theorem for R = F 9 . Write |J9| = m. Applying Lemma [3.11 we 
have 


k\N f (D,k,b) = ~(m) k + - V ip 1 (b) V sign(T)C(r)F r (ip), 

q 9 4^ 

where Ck is the set of all conjugacy classes of Sk and C(t) counts the number of 
permutations conjugate to r, and 

k 

FrW = l[(J2^(f^))) Ci - 

i= 1 a£D 

Applying equation 15.11 in Corollary 15.21 we have 

\Fr(ip)\ < m 2:?=i*"*iW((d- i)qh +c )EtiCi( 1 -m i (b)) ) 

where mi(ip) is defined as follows: nii(ip) = 1 if i/) 1 = 1 and rrii(ip) = 0 if ip 1 1. 

Since the additive group of F ? is p-elementary, for nontrivial character ip, order (ip) = 
p. Thus ip 1 = 1 if and only if p \ i. Assume m > (d — 1 )q^ + c. We deduce 

k\N f (D,k,b) = -(m) k + - ^ ip^ 1 ^) ^2 sign(T)C(r)F T (ip) 

■0, order (0)=p rGCfc 

> —(m)k — -- Ij Cj ((d — 1 )qi + c)^ j=1 ’ p i j Cj 

a n ' 
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1 . , ,m p — 1 , „. i . , „. 

> ~{m)k - (- V - - {{d - 1 )q 2 +c) + k - l) fc . 

q p p 

The last equality follows from Lemma 12.71 in the case that d = p. 

6 . The Case f(x) = x, R = G and BCG arbitrary 

Proof of Theorem for R = G. Let G be the group of additive characters 
of G and let ipo be the principal character sending each element in G to 1. Let 
N(D, k. b) be the number of fc-subsets SCO such that J2 xe s x = b. Write |G| = n 
and \D\ = m = n — c. Suppose m > c. Applying Lemma 13.11 we have 


k\N{D,k,b) = ~(m) k + - ^ ip 1 (b) ^ sign(r)G(r)F T (i/>), 
n n z —' z —■' 

Ip^o reC k 

where Ck is the set of all conjugacy classes of Sk and C(r) counts the number of 
permutations conjugate to r, and 

k 

Mi >) = II(E^(«)) Ci - 

i— 1 a£D 


A trivial character sum bound gives 

\F T (ip)\ < m nf=i«"“W c Sf=i«*( 1 -"“W) j 


where rrii(ip) is defined as follows: = 1 if ip 1 = 1 and rrii{ip) = 0 if ip z ^ 1. 

Let e(G) be the exponent of G and so it is also the exponent of G. Thus for 
nontrivial character ip, rriipip ) = 0 if ( e(G),i ) = 1. Since to > c, we have 


k\N(D, k,b) = -(m) k + - V] ip x (6) V] sign(r)G(r)F T (^) 

Jl 71 z ^' 


■0 #*00 


T(z.Ck 


1 Tl — 1 \ *\ fc 

> —(m)k -/ C(r)m^ j=i ,( e ( G ),j) >i c j c ^j=i,(e(G),j)=i J 

n n 1 ' 

T(^Ck 

> ~{m)k - (c+ (to - c) - + k - l)fe, 

71 z - 7 


i|e(G),Ai(i)=—1 


where the last equality follows directly from Lemma 12.61 


7. The Case f(x) = x, R = G and D = G 

Proof of Theorem for D = R = G. The proof is quite similar as the last case. 
In this case, \D\ = |G| = to and c = 0. Applying Lemma f!TTl we have 


k\N(D,k,b) = -(n) k + - ^ ip 1 {b) ^ sign (r)C(r)F T {ip), 
n n z 

reCk 

where Ck is the set of all conjugacy classes of Sk and G(r) counts the number of 
permutations conjugate to r, and 

k 

*vw=n(E^( a )) ci - 

1 Qj£.G 
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A trivial character sum computation gives 

F T (ip) = n E -i CimiW 0 E -i Ci(1_miW,)) , 

where rrii(ip) is defined as follows: rrii(ip) = 1 if ip 1 = 1 and rrii(ip) = 0 if ip 1 ^ 1. 

Let e(G) be the exponent of G and so it is also the exponent of G. Thus for 
nontrivial character ip, m,i(ip) = 0 if ( e(G),i ) = 1. We then have 

k\N(D, k,b) = ~{n) k + - 55 ip^ib) V sign {r)C(r)F T (ip) 

n n zJ 

r=(ci,c 2 ,— ,c k )eC k 

= -(n)k + -J2 55 f Hi) ^ si gn( T )C(T)n E ‘= lCiroi(w ° E f= lCi 

l^d\n ip,order(ip)=d rGCfc 


Since for r = (ci, c%, ■ ■ ■ , Ck) € Ck , Cj = 0 => rrii{ip ) = 1, we have 
k\N(D, k,b) = -(n)fc + - 55 55 r ^P~ 1 ip) 'pT sign {r)C(r)n^= lCi 

l^d\n , 0,order(i p)—d r^Ck 

= l {n)k + ^~n~ E E E (-l) Cl+C2+ "' +Cfe CW» EtlCi 

l 7 *=d|n ip ,order{ip)=d rGCfc 

= ^(«)fc + E^-E 51 55 C(' r )(-ri) E?=lC< 

l 7 ^d|n , 0,order('i/>)=d rGCfc 


From the formula given in Lemma 12.71 one has 
55 C{r){-n)^ 

T=(ci,-- ,cfc)ec fc 

= A 1 = f-n/d+k/d- 1\ = , 

fc! (1 — t d )~ n / d \ fc/d ) \k/d) 


We then have 


HI\T(AM) = i(«)* + hi£ E E r‘Wt!(-i 


— — (h)/c + 
n n 


l^d\n,d\k ip ,order (ip)=d 
(“ 1 ) fe V- u k/dfn/d 


J2 *!(-l) fc/d 


l^d|(n,fc) 


A:/d 


Thus 


N(D,k,b) = 


\ fn\ 1 


71 V ^ 

l^d|(n,fc) 


n/d 

fc/d 


55 r'w- 

■0, order (ip)—d 


55 ^( & )’ 

, 0,order('i/j)=d 


where X^,order(i/0=d V’W is the Ramanujan sum. 

Remark: This approach can be used to give explicit formulas when G\D is a 
very small constant. 

Acknowledgements. The authors wish to thank Professor Richard Stanley for 
his helpful suggestions. 
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